A hacker may have obtained the personal information of University of Arizona employees, as well as details of the institution's financial transactions.